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Assistant Commissioner for Patents 
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Washington, DC 20231 
Sir: 

The following preliminary amendments and remarks are respectfully 
submitted in connection with the above-identified application. 

In the Abstract 

Please replace the Abstract of the Disclosure with the rewritten Abstract of the 
Disclosure located on a separate sheet below: 
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In te Specification 

Please replace the specification with the substitute specification attached 
hereto. 
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In The Claims 

Please cancel claims 1-5 without prejudice or disclaimer of the subject 
matter contained therein. 

Please add the following new claims: 

-6. (NEW) A method of controlling digital product licensing using product 
registration servers, comprising the steps of: 

creating a secret/ public key pair for a digital product manufacturer by 
using a manufacturer digital product license control program installed on a 
manufacturer computer; 

transmitting the manufacturer's public key to a central digital product 
registration server and receiving a public key of the central digital product 
registration server; 

registering the manufacturer to the central digital product registration 
server and receiving a partial user-ID file from the central digital product 
registration server; 

registering a digital product with player information to the central digital 
product registration server and receiving a product registration file of the product 
from the central digital product registration server; 

distributing product information to all local digital product registration 
servers by the central digital product registration server; and 
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merging the product and the product registration file and enciypting them to 

produce a digital product in a public format. 

7. (NEW) The method according to claim 6 wherein the central and local 
registration servers are integrated into a single server. 

8. (NEW) The method according to claim 6, wherein the manufacturer 
digital product license control program attaches the manufacturer's secret/ public 
key pair and the public key of the central digital product registration server to the 
partial user-ID file that includes manufacturer information encrypted by the 
manufacturer's public key and digitally signed by a secret key of the registration 
server. 

9. (NEW) The method according to claim 6, wherein the registered digital 
product information includes a product ID, price, and player name. 

10. (NEW) The method according to claim 6, further comprising: 
creating a secret/public key pair for a user by using a user digital product 

license control program installed on a user computer; 

selecting a particular local digital product registration server from a digital 
product registration server list; 

sending the user's public key to the selected local registration server and 
receiving a public key of the selected local registration server; and 
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registering the user to the selected local registration server and receiving a 

partial user-ID file from the selected local registration server. 

11. (NEW) The method according to claim 10, wherein the user digital 
product license control program attaches the user's secret/ public key pair and the 
public key of the user's digital product registration server to the partial user-ID 
file that includes user information encrypted by the user's public key and digitally 
signed by a secret key of the selected local digital product registration server. 

12. (NEW) The method according to claim 10, further comprising: 
registering a CPU associated with the user to the selected local digital 

product registration server; and 

receiving a license file that includes CPU information encrypted by the 
user's public key and digitally signed by the secret key of the selected local digital 
product registration server. 

13. (NEW) The method according to claim 10, further comprising: 
downloading public digital products from the Internet by the user; 
selecting a particular public digital product using the user computer; 
linking the selected public digital product to a user digital product 

execution program of the user digital product license control program; and 
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processing the selected public digital product, decrypting said public digital 

product and reading a product ID from the product registration file by the linked 

digital product execution program. 

14. (NEW) The method according to claim 13, further comprising: 
checking a license file from the selected local registration server to 

determine whether there is a usage license for the selected public digital product; 

purchasing a license for the selected public digital product, if there is no 
license for the selected public digital product and receiving a new license file 
including the purchased license; 

changing the selected public digital product into a personal digital product 
if there is a license; and 

calling a player to execute the personal digital product. 

15. (NEW) The method according to claim 14, wherein the user digital 
product license control program does not check CPU information if a "user based 
license" indicator is turned on in the license file. 

16. (NEW) The method according to claim 14, wherein the user digital 
product license control program does not check user information if a "CPU based 
license" indicator is turned on in the license file. 

17. (NEW) The method according to claim 14, further comprising: 
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transferring the partial user-ID file, the license file and the personal digital 

product to a specific machine. 

18. (NEW) The method according to claim 14, further comprising: 
storing user information, CPU information and digital product usage license 

information in a datable of the selected local digital product registration; and 

replicating the local digital product registration server database to a central 
database of the central product registration server. 

19. (NEW) The method according to claim 14, wherein the user-ID file and 
the license file are updated based on an expiration date or refresh period selected 
by the user. 

20. (NEW) The method according to claim 10, further comprising: 
registering CPU associated with the user to the particular local digital 

product registration server. 

21. (NEW) The method according to claim 20, wherein in the step of 
registering the CPU, the user digital product license control program creates a 
secret/ public key pair for the CPU and sends the CPU public key to the particular 
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local digital product registration server which encrypts and digitally signs a license 

file by using the CPU public key.— 
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REMARKS 

Claims 6-2 1 are pending in the present application. By this Preliminary 
Amendment, claims 1-5 have been cancelled and new claim 6-21 have been 
added. 

The present Preliminary Amendment provides the Substitute Specification 
which does not contain new matter. The Substitute Specification corrects 
numerous grammatical and idiomatic errors and improves readability according 
to U.S. practice. 

Entry of the above amendments is earnestly solicited. An early and 
favorable first action on the merits is earnestly solicited. 

Should there be any outstanding matters which need to be resolved in the 
present application, the Examiner is respectfully requested to contact Esther H. 
Chong (Registration No. 40,953) at the telephone number of the undersigned 
below, to conduct an interview in an effort to expedite prosecution in connection 
with the present application. 

Attached hereto is a marked-up version of the changes made to the 
application by this Amendment. 
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If necessary, the Commissioner is hereby authorized in this, concurrent, and 

further replies, to charge payment or credit any overpayment to Deposit Account No. 

02-2448 for any additional fees required under 37 C.F.R. § 1. 16 or under 37 C.F.R. 

§ 1.17; particularly, extension of time fees. 

Respectfully submitted, 

BIRCH, STEWART, KOLASH BIRCH, LLP 



By^4£k 



Joseph A. Kolasch 
Registration Ifo. 22,463 

P.O. Box 747 

Falls Church, VA 22032-0747 
(703) 205-8000 



JAK/EHC:lmh 

Enclosures: Substitute Specification 

Marked-Up Copy of Specification 

Version with Markings to Show Changes Made 
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VERSION WITH MARKINGS TO SHOW CHANGES MADE 

In the Abstract 

The Abstract has been rewritten as follows: 

-ABSTRACT OF THE DISCLOSURE 

The registration server is independent of digital product manufacturers and 
open to all digital product manufacturers. The manufacturer registers his digital 
product to the server and obtains a [gets] product registration file of the product 
from the server. The product manufacturer merges the product and the product 
registration file and encrypts them using a manufacturer digital product license 
control program. If a public digital product is executed on a user computer, the 
[said] digital product is linked to a user digital product execution program which is 
a subsystem of a user digital product license control program. The program decrypts 
the [said] digital product and reads the product ID from the product registration file. 
The [And said] program also checks the license file received from a digital product 
registration server. If there is no license for the digital product, the [said] program 
asks the user to purchase [buy] a license of the product.— 

In the Specification 

The specification has been replaced with the substitute specification attached 
hereto. A marked-up copy of the specification is also attached hereto. 
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In the Claims 



Claims 1-5 have been cancelled. 



New claims 6-2 1 have been added. 
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DIGITAL PRODUCT LICENSE CONTROL SYSTEM 
BASED ON INDEPENDENT DIGITAL PRODUCT 
REGISTRATION SERVER 

RELATED APPLICATION 

This is the national phase under 35 U.S.C. § 371 of PCT International 
Application No. PCT/ KR99/ 00277 which has an International filing date of 
June 5, 1999, which designated the United States of America. 



BACKGROUND OF THE INVENTION 

Field of the Invention 

This invention related to a digital product license control method £ind 
system for controlling licensing of digital products using digital product 
registration servers. 



Discussion of Related Art 

There are limited software license control systems and digital product 
license control systems for controUing licensing of certain products. But the 
present invention provides a digital product license control method and system 
which is superior and advantages over the existing product license control 
systems. 



SUMMARY OF THE INVENTION 

The present invention is directed to a digital product license control 
method and system based on digital product registration servers, which 
overcomes problems associated with related digital product license control 
methods and systems. 

1 
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In accordance with an embodiment of the present invention, a method of 
controlling digital product licensing using product registration servers, 
comprises the steps of: creating a secret/public key pair for a digital product 
manufacturer by using a manufacturer digital product Hcense control program 
installed on a manufacturer computer, transmitting the manufacturer's public 
key to a central digital product registration server and receiving a public key of 
the central digital product registration server, registering the manufacturer to 
the central digital product registration server and receiving a partial user-ID file 
from a local digital product registration server, registering a digital product with 
player information to the central digital product registration server and 
receiving a product registration file of the product from the central digital 
product registration server, distributing product information to all local digital 
product registration servers by the central digital product registration server, 
and merging the product and the product registration file and enciypting them 
to produce a digital product in a public format. 

These and other objects of the present application will become more 
readily apparent from the detailed description given hereinafter. However, it 
should be understood that the detailed description and specific examples, while 
indicating preferred embodiments of the invention, are given by way of 
illustration only, since various changes and modifications within the spirit and 
scope of the invention will become apparent to those skilled in the art from this 
detailed description. 

DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS 

According to the present invention, a registration server is independent 
of digital product manufacturers and open to all digital product manufacturers. 
Every digital product would need to be modified to participate in this new 

2 
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digital product license control system and method of the present invention. 

In the present invention, a digital product manufacturer is registered to 
a registration server. Generally, digital products such as MPS or VOD files, 
which cannot be executed alone, are processed by specific programs (players). 
The product manufacturer registers his digital product, with the player 
information, to the registration server and obtains a product registration file of 
the product from the registration server. The product manufacturer merges the 
product and the product registration file and encrypts them using the 
manufacturer's digital product license control program. The output is a pubHc 
digital product. 

A public digital product has a specific file type such as 
"sampleMPS.dsl". If a public digital product is executed on a user computer, 
then that digital product is linked to a digital product execution program which 
is the subsystem of the user's digital product license control program installed 
on the user computer. Digital products (public digital products) are then 
downloaded from the Internet or other networks and are executed by double 
clicking an icon on the user's computer screen. 

Upon double clicking on the digital product displayed on the user's 
computer screen, the user's license control program processes the digital 
product. Particularly, the user's license control program decrypts the digital 
product and reads a product ID from the product registration file downloaded 
with the digital product. The user's license control program also checks a 
license file to determine whether there is a usage license for the digital product. 
The license file is provided from a digital product registration server. If there is 
no license for the digital product, then the user's program asks the user to buy 
a license for the digital product. If the user does not agree to buy the license. 
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then the user's program stops execution of the digital product. However, if the 
user agrees to buy the license, then the user's Hcense control program receives 
a new license file, which includes the purchased license, from the registration 
server and converts the public digital product into a personal digital product. A 
personal digital product has a specific file type such as "sampleMP3.ds2". 

If there already exists a license by the user for the digital product, then 
the user's hcense control program can convert the (public) digital product to a 
personal digital product at any time. A personal digital product cannot be 
interpreted without the user-ID file which was used in creating the personal 
digital product. Then the user's license control program calls a player or other 
suitable means to execute the personal digital product. 

In the present invention, unauthorized users cannot access or use the 
personal digital product. Also the license file cannot be used or accessed by 
unauthorized users because the license file is enciypted by using the user's 
public key and digitally signed by using a secret key of the digital product 
registration server. To use a license file, the user needs the secret key of the 
user and a passphrase or the like to activate the secret key. The license file is 
digitally signed by the digital product registration server and cannot be 
modified by the user to add any unauthorized license. 

The license file includes 3 pieces of information in addition to license 
information. They are: user ID, CPU (computer device) ID and owner ID. If the 
user ID in the license file is different from the user ID of the user-ID file, then 
the license file is ignored by the user's digital product license control program. 
If the CPU ID in the license file is different from the CPU ID of processor such 
as PSN of Intel processor Pentium III or computer, then the license file is 
ignored by the user's digital product Hcense control program. In this manner. 
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even authorized users cannot execute their personal digital product on 
unauthorized computers. 

A digital product license control system according to an embodiment of 
the present invention includes one or more manufacturer computer devices or 
5 systems used and controlled by digital product manufactures, a central digital 
product registration server communicating with the manufacturer computer 
devices, a plurality of local registration servers communicating with the central 
registration server and the manufacturer computer devices through the central 
registration server, and a plurality of user communication devices such as a 

10 user computer operating on a user side, for example by an individual end user, 
and communicating with the local registration servers via communication 
networks such as the Internet or via some other means. The term "local" does 
not necessarily mean that the local registration server is located close to or 
locally of the user computer devices, but is used to merely distinguish the local 

15 registration server from the central registration server. 

In accordance with the present invention, digital product manufacturers 
register their digital products to the central digital product registration server 
using their manufacturer computer devices. The central registration server 
then distributes the registered product information to local digital product 

20 registration servers all over the world. 

Three types of registration are needed by the user in the present 
invention and they are: user registration, CPU (user's computer device) 
registration and digital product usage license registration. Each user 
registrates himself or herself once per person using the user computer to the 

25 registration servers. After that, the user registers his or her CPU once per CPU. 
Then the user registers a digital product usage license once per every product 
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of specific CPU. All the registrations are performed after the user's CPU or 
computer is connected to an appropriate local digital product registration 
server, e.g., via the Internet. 

During the user registration, the user obtains a partial user-ID file from 
5 the local digital product registration server which communicates with the 
central registration server. After receiving the partial user-ID file, the user's 
digital product license control program attaches a public/ secret key pair 
assigned to the user and a public key of the registration server of the user to 
the partial user-ID file. This user-ID file is essential in registering the user's 

10 CPU and purchasing the digital product. The user-ID file is independent of any 
CPU and needs to be copied to all of the user's other CPUs. 

During the CPU registration, the user obtains the license file from the 
local digital product registration server. And this license file is updated every 
time the user purchases a new digital product or upgrades the existing digital 

15 product. The digital product information is also added to the license file every 
time a new product is purchased or the existing product is upgraded. Also, 
because of expiration dates, the license file is refreshed periodically. The 
expiration date or refresh period prevents an unauthorized long-term use of the 
user-ID file or license file. A digital product usage license is given to a specific 

20 CPU of a specific user. 

In addition to a direct purchase through public digital product 
execution, there is an indirect purchase. To purchase a digital product without 
executing the public digital product, the user selects a product category on a 
license control program screen of the user's computer, and then selects the 

25 digital product from the displayed relevant digital products in that product 
category. Then, the user's license control program sends a digital product 
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purchase request to the appropriate digital product registration server which in 
turn transmits a license file to the user's computer. This license file is 
dependent on a specific CPU and given to a specific CPU of a specific user. Both 
the user-ID file and license file are encrypted by the user public key and 
digitally signed by using the digital product registration server secret key. So, 
only the registration server can modify the user-ID and license files. 

In addition to the above "user/ CPU based license" method, there are two 
additional methods according to the present invention: "user-based license" 
and "CPU-based license" methods. In the user-based license method, a license 
is given to a specific user without having any CPU restriction on its license file. 
This license can be used on any CPU and strongly controlled by the user. In the 
CPU-based license method, a license is given to a specific CPU without having 
any user restriction on its license file. 

In one embodiment, the license file is encrypted by using a user public 
key, but the CPU based Ucense file is encrypted by using the CPU public key. 
For the CPU based license, one pair of secret/public key is created just for the 
CPU. In case of the User/ CPU based license and the user based license, the 
pair of secret/ public key of the user is used without creating a new key pair for 
the CPU. In case the present invention is used in a company setting, a 
company owner may want to change user information of a PC/workstation 
depending on which person is using that PC /workstation. For example, if an 
employee leaves the company, the company owner can assign a different 
user/ employee to the PC /workstation. In this appHcation, then both the 
company owner information and the user information are stored in the Ucense 
file and used. 

If the digital product is executed on a specific machine such as a MPS 
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player, which may not necessarily have a full configuration as a personal 
computer, then the user will need to purchase a digital product through a 
computer and transfer it to that machine (MPS player). The user also needs to 
move his user-ID file, license file and personal digital products to the machine. 
5 The user-ID file and license file are simplified files and created by the user's 
digital license control program. Basically the machine is treated as part of the 
computer which has the license file. The machine has no CPU ID and is treated 
as if the machine has the same CPU ID as the computer. If the user of the 
machine does not have access to a computer, it can be done on any computer. 

10 The user's digital license control program of the present invention provides a 
way to create the user-ID file and license file for the machine. 

A method of controlHng a digital product license based on a digital 
product registration server according to an embodiment of the present 
invention is as follows. 

15 A secret/public key pair for a digital product manufacturer is created by 

a manufacturer digital product license control program installed on a 
manufacturer computer. After being connected to a central digital product 
registration server, the manufacturer digital product license control program 
sends the manufacturer's public key to the central digital product registration 

20 server and receives the public key of the central digital product registration 
server. 

The manufacturer (once per manufacture) is registered to the central 
digital product registration server. Once a user registers, the manufacturer 
receives a partial user-ID file from the central digital product registration 
25 server. The manufacturer digital product Hcense control program attaches the 
manufacturer's secret/ public key pair and the public key of the central digital 
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product registration server to the partial user-ID file that includes 
manufacturer information encrypted by the manufacturer's public key and 
digitally signed by the sever secret key. 

Each digital product, preferably with player information, is registered to 
the central digital product registration server and the manufacturer computer 
receives a product registration file of the digital product from the central digital 
product registration server. 

The product information is distributed to all local digital product 
registration servers by the central digital product registration server. Registered 
digital product information includes a product ID, price, player name, etc. A 
user can select one or more digital products from the registered digital product 
list. That is, the user can purchase a digital product by using the digital 
product list or by executing the product itself. The product list file includes the 
product information such as product ID, price, etc. Also, the product itself 
includes the product information. It is easier for the user to buy a particular 
pubHc digital product by double clicking the public digital product and 
following the instructions given by the user digital product execution program. 

The digital product and the product registration file are merged and 
encrypted by the manufacturer digital product license control program instaUed 
on the manufacturer computer. The output is the format of pubUc digital 
product. 

A secret/public key pair for the user is created by the user digital 
product license control program on the user computer. 

The user connects to a particular local digital product registration server 
by selecting one from the digital product registration server list displayed on 
the user computer. The user's public key is then sent to the selected local 
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digital product registration server and the public key of the selected local 
registration server is received by the user computer. 

The user (once per person) is registered to the local digital product 
registration server and the user computer receives a partial user-ID file created 
based on the registered user information from the local digital product 
registration server. The user digital product license control program attaches 
the user's secret/public key pair and the public key of the user's local digital 
product registration server to the partial user-ID file that includes user 
information encrypted by the user's public key and digitally signed by the local 
sever secret key. This user-ID file is essential in registering the user's CPU and 
in registering a digital product usage license. 

The user can register his or her CPU for his computer hardware (once 
per CPU) to the local digital product registration server. In return, the user 
computer receives a license file that includes CPU information encrypted by the 
user's pubfic key and digitally signed by the local digital product registration 
server secret key from the local digital product registration server. 

Public digital products are downloaded from the Internet by the user. 
The user can double click on a desired public digital product displayed on the 
user computer. The selected digital product is linked to the digital product 
execution program of the user digital product license control program installed 
on the user computer. 

The selected public digital product is processed and decrypted and the 
product ID is read from the product registration file by the Hnked digital 
product execution program of the user. The user license control program 
checks the license file to determine whether there is a usage license for the 
selected digital product. If there is no Hcense obtained by the user for the 
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selected digital product, the user can purchase a license for the product; 
otherwise, the process stops. The newly purchased license file wiU include the 
purchased license. However, if there already is a license obtained by the user, 
the selected digital product is converted into a personal digital product (i.e., 
format is converted) by the user license control program. Then the personal 
digital product is executed by a player or the like. User information, CPU 
information and the digital product usage license information are stored in the 
local digital product registration server database by the local digital product 
registration server. The local digital product registration server database is 
replicated in the central digital product registration server database for backup 
purposes and for cross digital product registration server function such as 
changing the digital product registration server and changing the user who was 
registered to a different digital product registration server from the former user. 

In one embodiment, the user-ID file and the license file are updated 
based on their expiration dates or refresh period. Expiration date or refresh 
period prevents unauthorized long-term use of the user-ID file and/ or license 
file. The user of a CPU may be changed by the owner of the CPU in case of a 
user change. The license file can include the owner information. 

In another embodiment, only one registration server exists in the world 
and does all registration services. In such case, the digital product registration 
server is connected automatically. Consequently, repHcation from local 
registration servers to a central registration server is not needed and 
distribution of registered product information from the central registration 
server to local registration servers is not needed, since there is only one 
registration server. 

In one embodiment, a digital product usage license is validated without 
11 
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giving limitation to a specific CPU. User digital product license control program 
on a user computer does not check CPU information if a "user based license" 
indicator or similar information is on or stored in the license file. 

In another embodiment, a digital product usage license is validated 
without giving limitation to the specific user described in the Hcense file. User 
digital product license control program on the user computer does not check 
user information if a "CPU based license" indicator or similar information is on 
or stored in the license file. In still another embodiment, instead of entering the 
"user passphrase," the user can enter "passphrase of the CPU". 

In registering the user CPU for the computer (once per CPU), the user 
digital product license control program creates a secret/public key pair for the 
CPU and sends the CPU public key to a digital product registration server. The 
license file is encrypted by the CPU public key and digitally signed by the 
digital product registration server 

The digital product license control system of the present invention 
operates based on the following servers and software packages: a central 
digital product registration server obtaining digital product information from all 
digital product manufacturers and distributing the registered product 
information to local digital product registration servers all over the world, 
whereby the central registration server interfaces between all digital product 
manufacturers and local digital product registration servers; local digital 
product registration servers providing a user with the digital product 
information that is provided by the central digital product registration server, 
obtaining registration requests from users and providing license files to users; 
and software packages provided for general users, local digital product 
registration servers, the central digital product registration server and digital 

12 
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product manufacturers. 

According to the present invention, the software packages can be 
implemented using any existing computer language or coding and/or 
teclmiques to perform the functions of the present invention. 

The invention being thus described, it will be obvious that the same 
may be varied in many ways. Such variations are not to be regarded as a 
departure from the spirit and scope of the invention, and all such modifications 
as would be obvious to one skilled in the art are intended to be included within 
the cope of the following claims. 
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DIGITAL PRODUCT LICENSE CONTROL SYSTEM 
SYSTEM BASED ON INDEPENDENT DIGITAL PRODUCT 
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Technical field 



Digital product 1 



Softwar e lic e nso control. RELATED APPLICATION 

This is the national phase under 35U.S.C.g371of PCT International 
Application No. PCT/ KR99/0Q277 which has an International filing date of 
June 5, 1999. which designated the United States of America. 



BACKGROUND OF THE INVENTION 

Field of the Invention 

This invention related to a digital product license control, cry^ptography 
Publication Garfinkcl, Simoon. PGP(Prctty Good Privacy). 
Schneier, Bruce. Applied Cr}''ptography 



Discloaure of invention 



5^ method and system for controlling licensing of digital products using 
digital product registration servers. 
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Discussion of Related Art 

There are limited software license control systems and digital product 
license control systems for controlling licensing of certain products. But the 
present invention provides a digital product license control method and system 
which is superior and advantages over the existing product license control 
5 systems. 

SUMMARY OF THE INVENTION 

The present invention is directed to a digital product license control 
method and system based on digital product registration servers, which 

10 overcomes problems associated with related digital product license control 
methods and systems. 

In accordance with an embodiment of the present invention, a method of 
controlling digital product licensing using product registration servers, 
comprises the steps of: creating a secret /public key pair for a digital product 

15 manufacturer by using a manufacturer digital product license control program 
installed on a manufacturer computer, transmitting the manufacturer's public 
key to a central digital product registration server and receiving a public key of 
the central digital product registration server, registering the manufacturer to 
the central digital product registration server and receiving a partial user-ID file 

20 from a local digital product registration server, registering a digital product with 
player information to the central digital product registration server and 
receiving a product registration file of the product from the central digital 
product registration server, distributing product information to all local digital 
product registration servers by the central digital product registration server, 

25 and merging the product and the product registration file and encrypting them 
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to produce a digital product in a public format. 

These and other objects of the present application will become more 
readily apparent from the detailed description given hereinafter. However, it 
should be understood that the detailed description and specific examples, while 
5 indicating preferred embodiments of the invention, are given by way of 
illustration only, since various changes and modifications within the spirit and 
scope of the invention will become apparent to those skilled in the art from this 
detailed description. 

10 DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS 

According to the present invention, a registration server is independent 
of digital product manufacturers and open to all digital product manufacturers. 
Every digital product needs would need to be modified to participate in this new 
digital product license control system . The and method of the present 
15 invention. 

In the present invention, a digital product manufacturer is registered to 
the a registration server. Normally such Generally, digital products such as 
MPS or VOD files, which cannot be executed alone, are processed by specific 
programs (players). The product manufacturer registers his digital product, 

20 with the player information, to the registration server and gets obtains a 
product registration file of the product from the registration server. The product 
manufacturer merges the product and the product registration file and 
encrypts them using manufacturer the manufacturer's digital product license 
control program. The output is the format of a public digital product. 

25 Public A public digital product has a specific file type such as 

"sampleMPS.dsl". If a public digital product is executed on a user computer, 
said then that digital product is linked to a digital product execution program 
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which is the subsystem of «^ the user's digital product Ucense control 
program . Normall y di s i to l p ro d-'i^ ^-^ -^^ ^ r^nTrmlnnHrH frnm Tnt.ornet installed on 
the user computer. Digital products (pub lic digital products) are then 
downloaded from the Internet or other networks and are executed by double 
clicking an icon on the user's computer screen . 

Upon double clicking ef on the digital product , tlic digital product 
execution displayed on the user's computer screen, the user's license control 
program processes the digital product. The Particularly, the user's license 
control program decrypts said the digital product and reads the a product ID 
from the product registration file . .\nd oaid program checks the licenoc file to 
lm.o"' v.-hcthcr th e r? nir-oorn linnnop fnr r.niH downloade d with the digital 
product. The user's license control program also chec ks a license file to 
determine whether there is a usage Ucense for the digital product. The license 
file wao received is provided from a digital product registration server. If there is 
no license for the digital product, saM then the user's program asks the user to 
buy a license of the product. If uoer docon't buy it, said program otopo the 
running of for the digital product. If the user buyo it, the program receives d oes 
not agree to buy the license, then the user's program s tops execution of the 
digital product. However, if the user agrees to buv the li cense, then the user's 
license control program receives a new license file, which includes the 
purchased license, from the registration server and converts the program 
changes the public digital product te into a personal digital product format. 
Pergonal . A personal digital product has a specific file type such as 
"sampleMP3.ds2". 

If there io the licenoc, the program can change the public already exists 
a license by the user for the digital product, then the user's license control 
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program can convert the fpublic] digital product to a personal digital product at 
any time. Personal A personal digital product cannot be interpreted without the 
user-ID file which was used in creating said personal digital product . The 
program calls player to execute personal digital product. Unauthorizod user 
5 cannot use the personal digital product. Then the user's license control 
program calls a player or other suitable means to execute the personal digital 
product. 

In the present invention, unauthorized users cannot access or use the 
personal digital product. Also the license file cannot be used or accessed by 

10 unauthorized ttse? users because said the license file is encrypted by using the 
liseF user's public key and digital digitally signed by the using a secret key of a 
tiie digital product registration server. To use a license file, the user needs the 
secret key of the user and needs a passphrase or the like to activate the secret 
key. The license file is digital digitally signed by tiie digital product registration 

15 server and cannot be modified by a tiie user to add any unauthorized license. 

The license file includes 3 pieces of information in addition to license 
information. They arei user ID, CPU (computer device) ID and owner ID. If the 
user ID in the license file is different from the user ID of the user-ID file, then 
the license file is ignored by us^ the user's digital product license control 

20 program. If the CPU ID in tiie license file is different from the CPU ID of the- 
processory such as PSN of Intel processor Pentium Illy or computer, then the 
license file is ignored by usei^ the user's digital product license control program. 

In this manner, even authorized use^F users cannot execute their personal 
digital product on unauthorized computers. 

25 All digital product manufacturers register their products to the A digital 

product license control system according to an embodiment of the present 
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invention includes one or more manufacturer computer devices or systems 
used and controlled by digital product manufactures, a central digital product 
registration server . The communicating with the manufacturer computer 
devices, a plurality of local registration servers communicating with the central 
registration server and the manufacturer computer devices through the central 
registration server, and a plurality of user communication devices such as a 
user computer operating on a user side, for example by an individual end user, 
and communicating with the local registration servers via communication 
networks such as the Internet or via some other means. The term "local" does 
not necessarily mean that the local registration server is located close to or 
locally of the user computer devices, but is used to merely distinguish the local 
registration server from the central registration server. 

In accordance with the present invention, digital product manufacturers 
register their digital products to the central digital product registration server 
using their manufacturer computer devices. The central registration server 
then distributes the registered product information to local digital product 
registration servers all over the world. 

S Three types of registration need to be done by user. User are needed by 
the user in the present invention and they are: user registration, CPU (user's 
computer device] registration and digital product usage license registration. 
User do c G Each user regiatration for registrates himself or herself once per 
person using the user computer to the registration servers . After that, the user 
registers his or her CPU once per CPU. Use^ Then the user registers a digital 
product usage license once per every product of specific CPU. AU the 
registration io done after the connection to a registrations are performed after 
the user's CP U or computer is connected to an appropriate local digital product 

6 



Attorney Docket No. 3882-010 IP 
COMPARISON DOCUMENT 



registration server^-Q &, e.g., via the Internet. 

During the user registration, the user gets- obtains a partial user-ID file 
from, the local digital product registration server which communicates with the 
central registration server. After receiving the partial user-ID file, vtsef- the 

5 user's digital product license control program attaches a public/ secret key pair 
ef assigned to the user and a public key of the registration server of the user to 
the partial user-ID file. This user-ID file is essential in registering the user's 
CPU and purchasing the digital product. The user-ID file is independent of any 
CPU and this file needs to be copied to all of his the user's other CPUs. 

0 ©a During the CPU registration, the user gete obtains the license file 

from the local digital product registration server. And the- this license file is 
updated every time the user purchases a new digital product or upgrades Sb the 
existing digital product. The digital product information is also added to the 
license file every time a new product is purchased or a the existing product is 

5 upgraded. Also^ because of expiration date dates, the license file is refreshed 
periodically. Expiration The expiration date or refresh period prevents an 
unauthorized long-term use of the user-ID file or license file. Digital A digital 
product usage license is given to a specific CPU of a specific user. 

In addition to a direct purchase through public digital product 

0 execution, there is a an indirect purchase. To purchase a digital product 
without executing the public digital product, the user selects a product 
category on a license control program screen of the user's computer, and then 
selects the digital product ea from the displayed relevant digital products in 
that product category. Then, the use^ user's license control program sends a 

5 digital product purchase request to the appropriate digital product registration 
server . The which in turn transmits a license file to the user's computer. This 



7 



Attorney Docket No. 3882-OlOlP 
COMPARISON DOCUMENT 



license file is dependent on a specific CPU . The licenae file is and given to a 
specific CPU of a specific user. Both the user-ID file and license file is- are 
encrypted by the user public key and digital digitally signed by using the distal 
product registration server secret key. So, only the registration server can 
5 modify said the user-ID and license files. 

In addition to a bove method called user/CPU based license, there are 
two more methods . One is user - based license. The the above "user/CPU based 
license" method, there are two additional methods according to the present 
invention: "user-based license" and "CPU-based license" methods. In the user- 

10 based license method, a license is given to a specific user without having any 
CPU restriction on its license fUe. This license can be used on any CPU and 
strongly controlled by the user. The other method is In the CPU-based licenser 
The method, a license is given to a specific CPU without having any user 
restriction on its license file. 

15 Normally In one embodiment, the license file is encr5rpted by using a 

user pubfic key^ but the CPU based license file is encrypted by using the CPU 
public key. For the CPU based license, one pair of secret/public key is created 
just for the CPU. In case of the User/ CPU based license and the user based 
license, the pair of secret/public key of the user is used without creating a new 

20 key pair for the CPU. In case of company, there is an owner in addition to an 
Urse ^the present invention is used in a company setting, a company owner may 
want to change user information of a PC /workstation . This owner has right to 
change the user of a depending on which person is using that PC/ workstation. 
If For example, if an employee quits leaves the company, the company (owner) 

25 is — te owner can assign new — user a different user /employee to the 
PC /workstation. There is In this application, then both the company owner 
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information in addition to and the user information are stored in the license j&le 
and used . 

If the digital product is executed on a specific machine such as a MPS 
player, which doesn't may not necessarily have such a full configuration as a 
5 personal computer, fee -then the user will need to purchase a digital product 
needs to be purchaocd on through a computer and to be trnnoferrod to oaid 
transfer it to that machine (MP3 player) . The user also needs to move his user- 
ID file, license file and personal digital products to said the machine. Sai4 The 
user-ID file^ and license file are simplified ones files and created by user the 

10 user's digital license control program. Basically said tiie machine is treated as 
part of the computer which has the license file. Said The machine has no CPU 
ID and is treated as if said the machine has the same CPU ID as said the 
computer. If a the user of said the machine doesn't does not have access to a 
computer, it can be done on any computer. Use? The user's digital license 

15 control program of the present invention provides the a way to create tiie user- 
ID file and license file for said machine, the machine. 
Best mode for carrying out the invention 



Method of A method of controlling a digital product license control based 
on ind e pendent a digital product registration server compriaing the otopo of: 
according to an embodiment of the present invention is as follows. 

. creating A secret/public key pair for a digital product manufacturer is 
created by the a manufacturer digital product license control program installed 
on the a manufacturer computer. After being connected to a . connecting 
central digital product registration server, sending oaid the manufacturer 
digital product license control program sends the manufacturer's public key t& 
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lid regiotration 



and receiving the public key of oaid regiotration 



registering man-ufacturer 



per manufacture to the central digital 



product registration server and 



iving partial 



- ID file from receives the 



)ublic key of the central digital product registration server. 



Manufacturer digital product licenpc control program attacheo the 



(once per manufacture) is registered to the c entral digital product registration 
server te-the -. Once a user registers, the manufacturer receives a partial user- 
file from the that includco mnnufnctnrer infnrmntinn p-n ^ r j'p to d b;^ 
manufacturer public key and digital signed by the oever oecret key. 

■ registering digital product, with player information, to central digital 
product registration server . The manufacturer digital product license control 
program attaches the manufacturer's secret /public key pair and the pubhc kev 
ofth^ ond rccci\ing product registration file of the product from the Gor\-or. 

■ distributing the product information to all digital product regiotration 
ser\-era in the world by central digital product registration server to the partial 
user-ID file that includes manufacturer information encrypted by the 
manufacturer's public kev and digitallv signed by the sever secret kev. 

Each digit al product, preferably with player information, is registered to 
the central digital product registration server and the manufacturer computer 
receives a product registration file of the disdtal product from the central digital 
product registration server. 

The product information is distributed to all local digital product 
registration servers by the central digital product registration server . Registered 
digital product information includes a product ID, price, player name, etc. Se^ A 
user can select one or more digital product products from the registered digital 




manufacturer 



;t/public key pair and the public key of The manufacturer 
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product list. It is easier for user to buy a That is, the user can purchase a 
digital product by using the digital product list or by executing the product 
itself. The product list file includes the product information such as product 
ID, price, etc. Also, the product itself includes the product information. It is 
5 easier for the user to buy a particular public digital product by double clicking 
the public digital product and following the instruction instructions given by 
the user digital product execution program. 

. merg i n g t h e The digital product and said the product registration file 
and encr ypting t hem by are merged and encrypted by the manufacturer digital 
10 product license control program installed on the manufacturer computer . The 
output is the format of public digital product, 

■ creating secret/public key pair for a user by the user digital product 
license control program on the user computer. 

■ co nn ectin g digital product registration server by selecting one from the 
15 digital product r egistration server list, sending said user's public key to said 

registration server an d receiv ing the public key of said registration server. 

■ reg io ter i ng user once per person to the digital product registration 
server and receiving part i al user ID file from digital product registration server. 
User digital product license control program attaches the user s ecret/public 

20 key pair and the public key of the user's digital product registration server to 
the partial user ID file that includes user information encrypted by user public 
key a n d digital si gned by the sever secret key. This user - ID file is essential in 
registering CPU and in registering digital product usage license. 

■ registering CPU for his computer hardware once per CPU to said digital 
25 p roduct registration — server — and receiving license file that includes — CPU 

information encrypted by user public key and digital signed by digital product 
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rcgiotration oer\'-er occret key. 

■ downloading public digital products from Internet by user 

■ double cliclcing public digital product on user computer. 

■ linldng said digital product to digital product execution program of user 
digital product license control program. 

. processing public digital product, decrypting said public digital product 
and reading the product ID from the product registration file by the linked 
digital product execution program. 

. chccldng the license file to loiow whether there io usage licenoe for oaid 
digital product. 

. buying a license for the product or otopping the proccoo, if there io no 
license for the digital product. 

. receiving new license file which includes the purchased license. 

■ changing the digital product to a personal product format if there is 
license. 

■ calling player to execute personal digital product 

.storing user information, CPU information and digital product usage 
license information in digital product registration ser\^er database by the server. 

■ replicating digital product registration server database to central digital 
product registration ser\^er database for baclcup purpose and for cross digital 
product registration server function such as the change of digital product 
registration aerver and change of user who is registered to a different digital 
product registration ser\"er from the former user. 

■ updating user ID file and license file based on expiration date or 
refresh period by user. Escpiration date or refresh period prevents unauthorized 
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long term use of the user ID file or licenGe file. 

■ changing the nocr of a CPU by the owner of the CPU in cape of uoer 
change. License file has ouTier information. 

Indnotrial applicability 

Digital product license control system works based on following servers 
and software packages: 

-. — Central — digital — product — registration — server — gets — digital — product 
information — from — all — digital product manufacturers — and distributes — tfee 
registered product information to digital product registration ser\^ers all over 
the world. Said central registration ser\^er does the interface between aH digital 
product manufacturers and digital - product registration centers. 

. Normal digital product registration scr\'ers give user the digital product 
information that is given by central digital product registration scrv^cr, get 
registration request from users and give license file to users. 

. Software packages for general users, normal digital product registration 
ser\^erG, — central digital product registration serv^er and — digital product 
manufacturers. What is claimed is: 



1. Method of digital product license control based on independent digital 
product registration serv^er comprising the steps of: 

■ creating secret/public key pair for a digital product manufacturer by 
the manufacturer digital product license control program on the manufacturer 
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computer. 

■ connecting central digital product rcgiotration ocrv^er, pending paid 
manufacturcr'o public key to oaid registration acrv-cr and rccci\dng the pubUc 
key of said rcgiotration ocr\^er.- 

■ registering manufacturer once per manufacture to the central digital 
product rcgiatration ncrv^nr nnd rnrHTring pnt-tini 1100^ jp ffl^ from digital 
product rcgiotration Dcr\-cr. Manufacturer digital product license control 
program attachca the manufacturer oecret/public key pair and the public key 
of central digital product rcgiatration oerv^cr to the partial uper ID file tliat 
includ c o manufacturer information encr^^tcd by manufacturer public key and 
digital signed by the aever secret key. 

. registering digital product, with, player information, to central digital 
product registration ser\-cr and receiving product registration file of the product 
from the ser\^er. 

■ distributing the product information to all digital product regiatration - 
s er\^ers in the world by central digital product registration ocn^er. Rogiotorcd 
digital product informntinn inrlnHnr pT-nHTin+ JP, price, pla^-er name, etc. So, 
user can select digital product from the registered digital product list. It io 
easier for uocr to buy a digital product by doubl e clicldng the public digital 
product and follo\\ing the instruction given by the user digital product 
execution program. 

■ merging the product and said product registration file and encryiJting 
them by manufacturer digital product license control program. The output io 
the format of public digital product. 

■ creating secret/public key pair for a user by the uocr digital product 
license control program on the user computer. 
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■ connecting digital product registration server by selecting one from the 
digital product registration server list, sending said user's public key to said 
regi r st -f at - ion server and receiving the public key of said registration servef r 

■ registering user once per person to the digital product registration 
5 server and receiving partial user ID file from digital product registration server. 

User digital product license control program attaches the user secret/public 
key pair and the public key of the user's digital product registration server to 
the partial user-ID file that includes user information encrypted by user public 
key and digital signed by the sever secret key. This user ID file is essential in 
10 registering CPU and in registering digital product usage license. 

. registering CPU for his computer hardware once per CPU to said digital 
product registration — server — and recei\dng license — file — that includes — CPU 
information encrypted by user public key and digital signed by digital product 
registration ser^^er secret key. 
15 . downloading public digital products from Internet by user 

. double clicldng public digital product on user computer. 

. linldng said digital product to digital product execution program of user 
digital product license control program. 

. processing public digital product, decrypting said public digital product 
20 and reading the product ID from the product registration file by the linked 
digital product execution program. 

. checldng the license file to Imow whether there is usage license for said 
digital product. 

■ buying a license for the product or stopping the process, if there is no 
25 license for the digital product. 

■ receiving new license file which includes the purchased license. 
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■ changing the digital product to a peroonal product format if there io 
licenoe. 

■ calling player to execute peroonal digital product 

■ storing uocr information, CPU information and digital product uaago 
5 license information in digital product regiotration oerv^cr databaoc by the ocr\-cr. 

■ replicating digital product rcgiotration ocrv^cr databaoc to central digital 
product regiotration Gcr\^er database for backup purpose and for croaa digital 
product rcgiotration Gcr\^er function ouch ao the change of digital product 
registration Ger\^er and change of user who is registered to a different digital 

10 product registration Ger\-er from the former user. 



■ updating uoer ID file and license file based on e^cpiration date or 
refrcoh period by user. Expiration date or rcfreoh period prevents unauthorized 
long term uoc of the uoer ID file or licenoe file. 
15 ■ changing the uoer of a CPU by the owner of the CPU in case of uo o r 

change. License file has owner information. 



A method according to claim 1 wherein connecting to the only one digital 
product registration scr\^er automatically. Only one rcgiotration scrx^or ojdsto in 
20 the world and does aU registration ocrvdcc. 

Consequently, there is no replication from registration oer\^ o r to central 
registration serv^er and no distribution of registered product information from 
central registration scr\^er to registration servers, since there is only one ser\^cr. 
A method according to claim 1 wherein validating digital product uoage 
25 licenoe without giving limitation to a opecific CPU. User digital product license 
control program on user computer doesn't check CPU information if "uocr 
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based license" indicator is on in license file. 



A method according to claim 1 wherein validating digital product usage 



license without giving limitation to the-speeiific use 


r described in license file. 


User digital product license control program on us( 
user information if "CPU based license" indicator is c 


gr computer doesn't check 
)n in license file. Instead of 








CPU for the computer once per CPU, user digital product license control 


program creates secret/public key pair for the CPU and sends the public key to 
digital product registration server. The license file is encrypted by the CPU 



10 public ke^^ and digital signed by digital product registration ser\^er 

A method according to claim 1 wherein transferring user ID file, license 
file and personal digital products to a specific machine such as MPS player. If 
digital product is executed on said machine, which doesn't have such full 
configuration as personal computer, the digital product needs to be purchased 

15 on a computer and to be transferred to said machine. Said user ID file, license 
file are simplified ones and created by user digital license control program. 
Basically said machine is treated as part of the computer which has the license 
file. Said machine has no CPU ID and is treated as if said machine has oamo 
CPU ID as said computer. If a user of said machine doesn't have a computer, it 

20 can be done on any computer. User digital license control program pro\ides the 
way to create user ID file and license file for said machine. 

Abstract 

25 

The registration ser\^er is independent of digital product manufacturers 
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and open to all digital product manufacturcro. The manufacturer rcgiot o ra hio 
digital product to the serv^cr and gets product regiotration file of the product 
frora the oer\^er. The product manufacturer mergeo the product and the 
product regiotration file and cncr^^ptp them noing manufacturer digital product 
license control program. If a public digital product io executed on user 
computer, said digital product is linked to digital product e^tecution program 
which is subsystem of user digital product license control program. The 
program decrypts said digital product and reads the product ID from the 
product registration file. And said program checks the license file received from 
a digital product regiotration ocrver. If there io no license for the digital 
product, said program asks the user to buy a license of the product. A 
secret/public key pair for the user is created by the user digital product license 
control program on the user computer. 

The user connects to a particular local digital product registration server 
by selecting one from the digital product registration server list displayed on 
the user computer. The user's public key is then sent to the selected local 
digital product registration server and the public key of the selected local 
registration server is received by the user computer. 

The user fonce per person) is registered to the local digital product 
registration server and the user computer receives a partial user-ID file created 
based on the registered user information from the local digital product 
registration server. The user digital product license control program attaches 
the user's secret /public key pair and the public key of the user's local digital 
product registration server to the partial user-ID file that includes user 
information encrypted by the user's public key and digitally signed by the local 
sever secret key. This user-ID file is essential in registering the user's CPU and 
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in registering a digital product usage license. 

The user can register his or her CPU for his computer hardware (once 
per CPU) to the local digital product registration server. In return, the user 
computer receives a license file that includes CPU information encrypted by the 
5 user's public key and digitally signed by the local digital product registration 
server secret key from the local digital product registration server- 
Public digital products are downloaded from the Internet by the user. 
The user can double click on a desired public digital product displayed on the 
user computer. The selected digital product is linked to the digital product 

10 execution program of the user digited product license control program installed 
on the user computer. 

The selected public digital product is processed and decrypted and the 
product ID is read from the product registration file by the linked digital 
product execution program of the user. The user license control program 

15 checks the license file to determine whether there is a usage license for the 
selected digital product. If there is no license obtained by the user for the 
selected digital product, the user can purchase a license for the product: 
otherwise, the process stops. The newly purchased license file will include the 
purchased license. However, if there already is a license obtained by the user, 

20 the selected digital product is converted into a personal digital product (i.e., 
format is converted] by the user license control program. Then the personal 
digital product is executed by a player or the like. User information, CPU 
information and the digital product usage license information are stored in the 
local digital product registration server database by the local digital product 

25 registration server. The local digital product registration server database is 
replicated in the central digital product registration server database for backup 
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purposes and for cross digital product registration server function such as 
changing the digital product registration server and changing the user who was 
registered to a di fferent digital product registration server from the former user. 

In one embodiment, the user-ID file and the license file are undated 
based on their expiration dates or refresh period. Expiration date or refresh 
period prevents unauthorized long-term use of the user-ID file and /or license 
fflg- The user of a CPU may be changed by the owner of the CPU in case of a 
user change. The license ffle can include the owner information. 

In another embodiment, only one registration server exists in the world 
a nd does all registration services. In such case, the digital product registration 
server is connecte d automaticallv. Consequently, replication from local 
registration servers to a central registration server is not needed and 
distribution of regi stered product information from the central registration 
server to local regis tration servers is not needed, since there is only one 
registration server. 

In one embodiment, a digital product usage license is validated without 
giving limitation to a specific CPU. User digital product license control program 
on a user computer does not check CPU information if a "user based license" 
indicator or similar information is on or stored in the license file. 

In another embodime nt, a digital product usage license is validated 
without giving Umitation to the specific user described in the license file. User 
digital product licen se control program on the user computer does not check 
user i nformation if a "CPU based license" indicator or similar information is on 
or stored in the license file. In still another embodiment, instead of entering the 
"user passphrase," the user can enter "nassphrase of the CPU". 

I n registering the user CPU for the computer fonce per CPU), the user 
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digital product license control program creates a secret /public key pair for the 
CPU and sends the CPU public key to a digital product registration server. The 
license file is encrypted by the CPU public key and digitally signed by the 
digital product registration server 
5 The digital product license control system of the present invention 

operates based on the following servers and software packages: a central 
digital product registration server obtaining digital product information from all 
digital product manufacturers and distributing the registered product 
information to local digital product registration servers all over the world. 

10 whereby the central registration server interfaces between all digital product 
manufacturers and local digital product registration servers; local digital 
product registration servers providing a user with the digital product 
information that is provided by the central digital product registration server, 
obtaining registration requests from users and providing license files to users: 

15 and software packages provided for general users, local digital product 
registration servers, the central digital product registration server and digital 
product manufacturers. 

According to the present invention, the software packages can be 
implemented using any existing computer language or coding and /or 

20 techniques to perform the functions of the present invention. 

The invention being thus described, it will be obvious that the same 
may be varied in many ways. Such variations are not to be regarded as a 
departure from the spirit and scope of the invention, and all such modifications 
as would be obvious to one skilled in the art are intended to be included within 

25 the cope of the following claims. 
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Title of invention 



Digital product license contro l system based on i ndependent digital prod uct 
r egistration server , 

Technical field 



Digital product license control 
Background art 



Software license control, digital product license control, cryptography 
Publication - Garfinkel, Simson. PGP(Pretty Good Privacy). 
Schneier, Bruce. Applied Cryptography 

Disclosure of invention 



The registration server is independent of digital product manufacturers and 
open to all digital product manufacturers. Every digital product needs to be 
modified to participate in this new digital product license control system. 
The digital product manufacturer is registered to the registration server. 
Normally such digital products as MPS or VOD files, which cannot be 
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executed alone, are processed by specific programs (players). The 
manufacturer registers his digital product, with the player information, to the 
server and gets product registration file of the product from the server. The 
product manufacturer merges the product and the product registration file 
and encrypts them using manufacturer digital product license control 
program. The output is the format of public digital product. Public digital 
product has specific file type such as "sampleMPS.dsl". If a public digital 
product is executed on user computer, said digital product is linked to digital 
product execution program which is subsystem of user digital product 
license control program. Normally digital products are downloaded from 
Internet and are executed by double clicking. Upon double clicking of the 
digital product, the digital product execution program processes the digital 
product. The program decrypts said digital product and reads the product ID 
firom the product registration file. And said program checks the license file 
to know whether there is usage license for said digital product. The license 
file was received from a digital product registration server. If there is no 
license for the digital product, said program asks the user to buy a license of 
the product. If user doesn't buy it, said program stops the running of the 
digital product. If the user buys it, the program receives new license file, 
which includes the purchased license, from the server and the program 
changes the digital product to a personal digital product format. Personal 
digital product has specific file type such as "sampleMP3.ds2". If there is 
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the license, the program can change the public digital product to a 
personal digital product any time. Personal digital product cannot be 
interpreted without the user-ID file which was used in creating said personal 
digital product . The program calls player to execute personal digital product. 
Unauthorized user cannot use the personal digital product. Also the license 
file cannot be used by unauthorized user because said file is encrypted by 
the user public key and digital signed by the secret key of a digital product 
registration server. To use a license file, user needs the secret key of the user 
and needs passphrase to activate the secret key. The license file is digital 
signed by digital product registration server and cannot be modified by a 
user to add unauthorized license. The license file includes 3 information in 
addition to license information. They are user ID, CPU ID and owner ID. 
If user ID in license file is different from user ID of user-ID file, the license 
file is ignored by user digital product license control program. If CPU ID in 
license file is different from CPU ID of the processor, such as PSN of Intel 
processor Pentium III, the license file is ignored by user digital product 
license control program. So, even authorized user cannot execute personal 
digital product on unauthorized computers. 

All digital product manufacturers register their products to the central digital 
product registration server. The central regisfration server distributes the 
registered product information to digital product registration servers all over 
the world. 3 types of registration need to be done by user. User registration, 
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CPU registration and digital product usage license registration. User does 
user registration for himself once per person. After that, the user registers 
his CPU once per CPU. User registers digital product usage license once per 
every product of specific CPU. All the registration is done after the 
connection to a digital product registration server. On user registration, the 
user gets partial user-ID file from the digital product registration server. 
After receiving the partial user-ID file, user digital product license control 
program attaches public/secret key pair of the user and public key of the 
registration server of the user to the partial user-ID file. This user-ID file is 
essential in registering CPU and purchasing digital product. The user-ID file 
is independent of any CPU and this file needs to be copied to all of his 
CPUs. On CPU registration, user gets license file fi-om digital product 
registration server. And the license file is updated every time the user 
purchases new digital product or upgrades a digital product. The digital 
product information is added to the license file every time nevv^ product is 
purchased or a product is upgraded. Also because of expiration date, the 
license file is refireshed periodically. Expiration date or refi-esh period 
prevents unauthorized long-term use of the user-ID file or license file. 
Digital product usage license is given to a specific CPU of a specific user. In 
addition to direct purchase through public digital product execution, there is 
a indirect purchase. To purchase a digital product without executing the 
public digital product, user selects product category on license control 
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program screen, and then selects the digital product on displayed relevant 
digital products in that product category. Then, the user license control 
program sends digital product purchase request to the digital product 
registration server. The license file is dependent on a specific CPU. The 
license file is given to a specific CPU of a specific user. Both the user-ID 
file and license file is encrypted by user public key and digital signed by 
digital product registration server secret key. So, only the registration server 
can modify said files. In addition to above method - called user/CPU based 
license, there are two more methods. One is user-based license. The license 
is given to a specific user without having any CPU restriction on its license 
file. This license can be used on any CPU and strongly controlled by the 
usen The other method is CPU-based license. The license is given to a 
specific CPU without having any user restriction on its license file. 
Normally license file is encrypted by user public key but CPU based license 
file is encrypted by the CPU public key. For CPU based license, one pair of 
secret/public key is created just for the CPU. In case of User/CPU based 
license and user based license, the pair of secret/public key of the user is 
used without creating new key pair for the CPU. In case of company, there 
is an owner in addition to an user of a PC/workstation. This owner has right 
to change the user of a PC/workstation. If an employee quits the company, 
the company (owner) is to assign new user to the PC/workstation. There is 
owner information in addition to user information in license file. If digital 
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product is executed on a specific machine such as iVlP3 player, which 
doesn't have such full configuration as personal computer, the digital 
product needs to be purchased on a computer and to be transferred to said 
machine. The user needs to move his user-ID file, license file and personal 
digital products to said machine. Said user-ID file, license file are simplified 
ones and created by user digital license control program. Basically said 
machine is treated as part of the computer which has the license file. Said 
machine has no CPU ID and is treated as if said machine has same CPU ID 
as said computer. If a user of said machine doesn't have a computer, it "can 
be done on any computer. User digital license control program provides the 
way to create user-ID file and license file for said machine. 

Best mode for carrying out the invention 

Method of digital product license control based on independent digital 
product registration server comprising the steps of: 

. creating secret/public key pair for a digital product manufacturer by the 
manufacturer digital product license control program on the manufacturer 
computer. 

. connecting central digital product registration server, sending said 
manufacturer's public key to said registration server and receiving the 
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public key of said registration server. 

. registering manufacturer once per manufacture to the central digital 
product registration server and receiving partial user-ID file from digital 
product registration server. Manufacturer digital product license control 
program attaches the manufacturer secreu'public key pair and the public key 
of central digital product registration server to the partial user-ID file that 
includes manufacturer information encrypted by manufacturer public key 
and digital signed by the sever secret key. 

. registering digital product, with player information, to central digital 
product registration server and receiving product registration file of the 
product from the server. 

. distributing the product information to all digital product registration 
servers in the world by central digital product registration server. Registered 
digital product information includes product ID, price, player name, etc. So, 
user can select digital product from the registered digital product list. It is 
easier for user to buy a digital product by double clicking the public digital 
product and following the instruction given by the user digital product 
execution program. 

. merging the product and said product registration file and encrypting them 
by manufacturer digital product license control program. The output is the 
format of public digital product. 

. creating secret/public key pair for a user by the user digital product license 



wo 00/75787 



PCT/KR99/00277 



8 

control program on the user computer. 

. coimecting digital product registration server by selecting one from the 
digital product registration server list, sending said user's public key to said 
registration server and receiving the public key of said registration server. 
. registering user once per person to the digital product registration server 
and receiving partial user-ID file from digital, product registration server. 
User digital product license control program attaches the user secret/public 
key pair and the public key of the user's digital product registration server to 
the partial user-ID file that includes user information encrypted by user 
public key and digital signed by the sever secret key. This user-ID file is 
essential in registering CPU and in registering digital product usage license. 
. registering CPU for his computer hardware once per CPU to said digital 
product registration server and receiving license file that includes CPU 
information encrypted by user public key and digital signed by digital 
product registration server secret key. 
. dovmloading public digital products from Internet by user 
. double clicking public digital product on user computer. 
- linking said digital product to digital product execution program of user 
digital product license control program. 

. processing public digital product, decrypting said public digital product 
and reading the product ID from the product regisfration file by the linked 
digital product execution program. 



wo 00/75787 



PCT/KR99/00277 



9 

. checking the license file to know whether there is usage license for said 
digital product. 

. buying a license for the product or stopping the process, if there is no 
hcense for the digital product. 

. receiving new license file which includes the purchased license. 

. changing the digital product to a personal product format if there is license. 

. calling player to execute personal digital product 

.storing user information, CPU information and digital product usage license 
information in digital product registration server database by the server. 
. replicating digital product registration server database to central digital 
product registration server database for backup purpose and for cross digital 
product registration server function such as the change of digital product 
registration server and change of user who is registered to a different 
digital product registration server from the former user. 

. updating user-ID file and license file based on expiration date or refresh 
period by user. Expiration date or refresh period prevents unauthorized long- 
term use of the user-ID file or license file. 

. changing the user of a CPU by the owner of the CPU in case of user 
change. License file has owner information. 
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Industrial applicability 

Digital product license control system works based on following servers and 
software packages: 

. Central digital product registration server gets digital product information 

from all digital product manufacturers and distributes the registered product 

information to digital product registration servers all over the world. Said 

central registration server does the interface between all digital product 

manufacturers and digital product registration centers. 

. Normal digital product registration servers give user the digital product 

information that is given by central digital product registration server, get 

registration request from users and give license file to users. 

. Software packages for general users, normal digital product registration 

servers, central digital product registration server and digital product 

manufacturers. 
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What is claimed is: 

1 . Method of digital product license control based on independent digital 
product registration server comprising the steps of: 

. creating secret/public key pair for a digital product manufacturer by the 
manufacturer digital product license control program on the manufacturer 
computer. 

. connecting central digital product registration server, sending said 
manufacturer's public key to said registration server and receiving the 
public key of said registration server. 

registering manufacturer once per manufacture' to the central digital 
product registration server and receiving partial user-ID file from digital 
product registration server. Manufacturer digital product license control 
program attaches the manufacturer secret/public key pair and the public key 
of central digital product registration server to the partial user-ID file that 
includes manufacturer information encrypted by manufacturer public key 
and digital signed by the sever secret key. 

registering digital product, with player information, to central digital 
product registration server and receiving product registration file of the 
product from the server, 
distributing the product information to all digital product registration 
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servers in the world by central digital product registration server. Registered 
digital product information includes product ID, price, player name, etc. So, 
user can select digital product from the registered digital product list. It is 
easier for user to buy a digital product by double clicking the public digital 
product and following the instruction given by the user digital product 
execution program. 

. merging the product and said product registration fde and encrypting them 
by manufacmrer digital product license control program. The output is the 
format of public digital product. 

. creating secret/public key pair for a user by the user digital product license 
control program on the user computer. 

. connecting digital product registration server by selecting one from the 
digital product registration server list, sending said user's public key to said 
registration server and receiving the public key of said registration server. 
. registering user once per person to the digital product registration server 
and receiving partial user-ID fde from digital product registration server. 
User digital product license control program attaches the user secret/public 
key pair and the public key of the user's digital product registration server to 
the partial user-ID file that includes user information encrypted by user 
public key and digital signed by the sever secret key. This user-ID file is 
essential in registering CPU and in registering digital product usage license. 
. registering CPU for his computer hardware once per CPU to said digital 



wo 00/75787 



PCT/KR99/00277 



13 

product registration server and receiving license file that includes CPU 

information encrypted by user public key and digital signed by digital 

product registration server secret key. 

. downloading public digital products from Internet by user 

. double clicking public digital product on user computer. 

. linking said digital product to digital product execution program of user 

digital product license control program. 

. processing public digital product, decrypting said public digital product 
and reading the product ID from the product registration file by the linked 
digital product execution program. 

. checking the license file to knov/ v^hether there is usage license for said 
digital product. 

. buying a license for the product or stopping the process, if there is no 
license for the digital product. 

. receiving new license file which includes the purchased license. 

. changing the digital product to a personal product format if there is license. 

. calling player to execute personal digital product 

.storing user information, CPU information and digital product usage license 
information in digital product registration server database by the server. 
. replicating digital product registration server database to central digital 
product registration server database for backup purpose and for cross digital 
product regisfration server function such as the change of digital product 
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registration server and change of user who is registered to a different 
digital product registration server from the former user. 

. updating user-ID file and license file based on expiration date or refresh 
period by user. Expiration date or refresh period prevents unauthorized long- 
term use of the user-ID file or license file. 

. changing the user of a CPU by the ovraer of the CPU in case of user 
change. License file has owner information. 

2. A method according to claim 1 wherein connecting to the only one 
digital product registration server automatically. Only one registration server 
exists in the world and does all registration service. 

Consequently, there is no replication from registration server to central 
registration server and no distribution of registered product information 
from central registration server to registration servers, since there is only 
one server. 

3. A method according to claim 1 wherein validating digital product usage 
license without giving limitation to a specific CPU. User digital product 
license control program on user computer doesn't check CPU information if 
"user based license" indicator is on in license file. 

4. A method according to claim 1 wherein validating digital product usage 
license without giving limitation to the specific user described in license file. 
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User digital product license control program on user computer doesn't check 
user information if "CPU based license" indicator is on in license file. 
Instead of entering "user passphrase" user enters "passphrase of the CPU". 
In registering CPU for the computer once per CPU, user digital product 
license control program creates secret/public key pair for the CPU and sends 
the public key to digital product registration server. The license file is 
encrypted by the CPU public key and digital signed by digital product 
registration server 

5 . A method according to claim 1 wherein transferring user-ID file, license 
file and personal digital products to a specific machine such as MP3 player. 
If digital product is executed on said machine, w^hich doesn't have such full 
configuration as personal computer, the digital product needs to be 
purchased on a computer and to be transferred to said machine. Said user-ID 
file, license file are simplified ones and created by user digital license 
control program. Basically said machine is treated as part of the computer 
which has the license file. Said machine has no CPU ID and is treated as if 
said machine has same CPU ID as said computer. If a user of said machine 
doesn't have a computer, it can be done on any computer. User digital 
license control program provides the way to create user-ID file and license 
file for said machine. 
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